Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203633343733.roa
File: 38322e3131382e32382e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: /7GMMsUMyFrJrnMnDEzfi+lqT3G8DknrixPBv42IHZk=
Subject key identifier: D3:CD:75:65:B2:96:04:DA:E4:25:3B:3E:4A:81:7B:1A:82:C1:89:6E
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 47A14397933C61BA5A0EA52EE39742D01995B2A5
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203633343733.roa
Signing time: Sun 18 May 2025 17:02:47 +0000
ROA not before: Sun 18 May 2025 16:57:47 +0000
ROA not after: Sun 17 May 2026 17:02:47 +0000
asID: 63473
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a1:43:97:93:3c:61:ba:5a:0e:a5:2e:e3:97:42:d0:19:95:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 18 16:57:47 2025 GMT
Not After : May 17 17:02:47 2026 GMT
Subject: CN=D3CD7565B29604DAE4253B3E4A817B1A82C1896E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:ac:24:ae:d6:4a:6a:ea:54:eb:c8:87:95:
13:4e:0c:80:32:7a:a5:96:ce:73:4f:e5:1a:03:75:
78:d3:7d:a4:d8:e1:5a:b0:5a:7d:0e:dc:95:53:d5:
34:1a:cb:60:ad:60:1f:84:2b:a5:2f:af:d6:0f:6b:
c9:64:4f:61:20:54:3b:66:fe:a2:84:72:4a:d1:15:
d7:92:cd:1a:26:fc:e1:4d:e5:c6:b8:f4:9e:b5:eb:
8e:7e:16:33:29:03:19:e0:d6:61:8c:8a:65:b3:05:
19:03:fc:03:a1:bb:bc:98:68:5f:8c:cc:87:5c:f5:
41:90:2d:6a:79:63:14:76:bc:1e:b4:6d:80:60:3d:
26:4d:49:51:aa:37:c9:77:6b:21:b6:aa:39:76:fe:
5b:d4:79:99:57:4c:57:77:0f:86:5f:71:59:4f:dd:
d5:a1:53:20:8d:f8:77:ab:ba:eb:db:d4:f2:74:0a:
e3:66:33:c3:9f:a3:0e:38:85:15:b6:5b:74:b4:62:
c6:95:92:03:24:3d:f6:68:d3:ab:bc:85:9c:6d:a5:
5f:ef:ea:53:2e:8d:12:7d:07:46:36:29:2e:e8:54:
2c:0f:45:08:72:35:c7:57:df:f7:4d:b4:b6:e1:40:
27:60:96:60:d2:bf:10:d5:71:ac:08:da:e6:6d:2e:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:75:65:B2:96:04:DA:E4:25:3B:3E:4A:81:7B:1A:82:C1:89:6E
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e4:a4:78:6e:24:f4:60:b1:19:1b:48:09:99:62:d8:3a:aa:
3c:59:76:dd:a8:63:a1:12:e3:9e:44:ae:0e:3c:29:5e:08:15:
12:25:ce:55:3f:94:6b:84:f5:95:9e:fe:a4:2d:d6:e9:2a:88:
51:52:78:53:15:42:90:67:a2:20:38:41:57:4b:ff:01:0c:f5:
83:bf:96:0d:0a:bb:5e:65:a6:58:ed:22:e3:52:86:38:71:32:
f6:d8:5d:96:34:e8:44:c2:5d:d7:57:ed:4b:18:30:ab:a0:d6:
8a:63:4b:f6:79:b0:4c:c4:02:66:0d:4a:32:a3:28:9a:5f:78:
e8:54:e7:86:60:ec:7c:54:83:2e:6f:41:73:3c:c1:de:05:4d:
92:80:fd:d2:0c:fb:06:9b:68:aa:94:87:9a:10:7c:8a:f8:ea:
ee:6e:66:0c:66:6d:8e:8d:77:f2:2e:b0:e4:fd:9e:20:b7:25:
33:88:21:44:93:cc:8a:83:80:d2:88:db:80:68:95:29:20:f7:
49:43:41:2a:d8:28:7b:5c:a6:ed:4b:87:de:69:f6:13:6f:ff:
7d:eb:07:5f:c9:f0:c6:27:a4:4e:25:ed:b1:f1:53:fb:b8:26:
d3:9e:2f:b7:60:2f:ce:ed:92:d8:0d:c3:e9:61:68:bf:a4:81:
93:40:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:49:04 2025 by rpki-client